Russians posing as Signal support to launch phishing raids
… The AWS sandbox that isn't Security outfit BeyondTrust Phantom Labs claims that the AWS Bedrock AgentCore code interpreter's sandbox isn't much of a sandbox at all. …
Search
ShinyHunters claims yet another Salesforce customers breach
… MORE CONTEXT ShinyHunters 'does not like Salesforce at all,' claims the crew accessed Gainsight 3 months ago Salesforce-linked data breach claims 200+ victims, has ShinyHunters' fingerprints all over it Salesforce data missing? …
OpenAI ChatGPT fixes DNS data smuggling flaw
Security OpenAI patches ChatGPT flaw that smuggled data over DNS Check Point says outbound controls blocked web traffic but overlooked DNS OpenAI talks up data security for its AI services, yet Check Point says that ChatGPT allowed data to leak through a DNS side channel before the flaw was fixed. …
Claude Desktop changes software permissions without consent
… But Hanff claims he never installed any Anthropic browser extensions due to privacy and security concerns. Claude Desktop did so for him, without disclosure or permission. Browser extensions magnify security and privacy challenges because they often request overly broad permissions. …
Switzerland built an alternative to BGP. Nobody noticed
… "But the same controllability could be misused by totalitarian approaches to government. It's then fully controllable. It will help reduce dependencies on allies who might turn evil. But it could also be misused as a weapon against a free internet. …